feat(crowdsec): restore web traffic protection
Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
1 parent
726b3ee544
commit
ed1ddaad5d
23 files changed
+186
No files matched your search
@@ -0,0 +1,55 @@
|
||||
container_runtime: containerd
|
||||
agent:
|
||||
env:
|
||||
- name: COLLECTIONS
|
||||
value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios"
|
||||
- name: DISABLE_COLLECTIONS
|
||||
value: "crowdsecurity/linux crowdsecurity/sshd"
|
||||
|
||||
acquisition:
|
||||
- namespace: traefik
|
||||
podName: "*traefik*"
|
||||
program: traefik
|
||||
poll_without_inotify: true
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 100Mi
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 500Mi
|
||||
|
||||
lapi:
|
||||
env:
|
||||
- name: COLLECTIONS
|
||||
value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios"
|
||||
- name: DISABLE_COLLECTIONS
|
||||
value: "crowdsecurity/linux crowdsecurity/sshd"
|
||||
service:
|
||||
type: ClusterIP
|
||||
persistentVolume:
|
||||
data:
|
||||
enabled: true
|
||||
storageClassName: local-path-retain
|
||||
size: 1Gi
|
||||
config:
|
||||
enabled: true
|
||||
storageClassName: local-path-retain
|
||||
size: 100Mi
|
||||
storeLAPICscliCredentialsInSecret: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 150Mi
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 500Mi
|
||||
|
||||
metrics:
|
||||
enabled: true
|
||||
serviceMonitor:
|
||||
additionalLabels:
|
||||
release: prometheus-stack
|
||||
enabled: true
|
||||
namespace: prometheus
|
||||
Reference in new issue
Block a user